Privacy & Cookies
Pomospert uses privacy-first product analytics to understand how the app is used and to improve it. This page explains what we collect, how long we keep it, where it's stored, and the choices you have. It covers both the website and the iOS app; the Chrome extension has its own privacy page.
Who processes the data
We use PostHog, a product-analytics service, as our data processor. Your analytics data is processed and stored on PostHog's EU Cloud (servers in the European Union).
We also use Sentry to record errors and performance problems, so we can fix what breaks. It runs on the website only, and only on our live production site — never in development. It is configured to send no name, no email address, no cookies, no request headers, and no form or request contents. When you are signed in, a report does carry your internal account identifier — the same one analytics uses — so we can tell whether a fault hits one person or everyone. Web addresses are stripped of everything but campaign parameters before they are sent, so the sign-in codes and tokens that can appear in a web address are not sent with them.
The iOS app uses neither — see Mobile app below.
If you are on Pro and open Insights, we use Google Gemini to write your weekly recommendations and coach note. This happens on our servers, not in the app, and only for that feature. What we send is aggregated numbers only — your productivity score, pomodoro and focus-minute totals, the hour ranges you focus and lose focus in, your average weekday, and your streak lengths. We send no name, no email address, no account identifier, and no task titles or descriptions. The result is stored with your account and regenerated once a week. If you never open Insights, nothing is sent.
What we collect on the website
This section describes the website only. The iOS app collects none of it.
- Usage & device data: pages you view, links and buttons you interact with, time on page, the site that referred you, campaign (UTM) parameters, and your device type, browser, operating system, and screen size.
- Approximate location: country and region only, derived from your IP address at the moment of collection. We do not retain your raw IP address and do not determine your precise location.
- Sampled session replays: a small share (about 10%) of sessions are recorded to spot broken or confusing interactions. All form fields and typed text are masked, and the sign-in dialog and any content you enter are never captured.
What we do not collect
- Your name, email address, or profile photo are never sent to analytics or error reports.
- Passwords, authentication tokens, and the content of your tasks or notes.
- Your raw IP address or precise location.
- We do not track you across other websites or sell your data.
Mobile app
The Pomospert iOS app contains no third-party analytics, tracking, advertising or crash-reporting software. It does not use PostHog, it does not use Sentry, and it collects nothing to track you across other apps or companies. The sections above describe the website; they do not apply to the app.
- What the app sends to us:the tasks, pomodoro sessions and settings you create, sent over an encrypted connection to Pomospert's own servers. This is your account data — the same information the website saves — not a separate collection about you.
- What the app stores on your device: one sign-in credential and its expiry date, held in the iOS keychain rather than in ordinary app storage. Signing out or deleting your account removes it.
- Signing in: the app opens your Google, GitHub or Apple sign-in in the system browser and the sign-in happens on pomospert.app. If you use Apple's Hide My Email, we only ever receive the relay address Apple gives us.
You can delete your account from inside the app — see Deleting your account.
Signed-in users
When you sign in on the website, we associate analytics events — and any error reports — with your account using an internal account identifier only, never your email address. Signing out clears that association on your device. The iOS app sends neither, so there is nothing to associate.
How long we keep it
Analytics data is retained for 12 months, after which it is deleted by PostHog. Error and performance reports are kept by Sentry on its own retention schedule and then deleted. Your account data — tasks, sessions and settings — is kept until you delete your account.
Deleting your account
You can delete your account at any time from Settings → Danger zone, in the web app or the mobile app. Deleting is immediate and permanent: your profile, tasks, pomodoro sessions, settings and sign-in connections are erased from our database, on every device. There is no recovery period, and we keep no copy.
If you have an active subscription, deleting cancels it so you are not charged again. Cancelling is not a refund — the current period is not refunded. A few things sit outside our database and are not removed by deleting: analytics events already collected by PostHog and any error reports already collected by Sentry, which both age out on the retention schedules above, and the order and invoice records our payment provider keeps as merchant of record, which it is required to retain for tax purposes.
Your choices
Pomospert works fully with analytics disabled. On the website you can block analytics with a browser tracker/ad blocker or privacy setting. The iOS app needs no such control, because it sends no analytics in the first place. For any privacy question or a data request, contact us at privacy@pomospert.app.